2026-08-17_0597b38ac2f3bb8285372914d1a5ba84_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-17_0597b38ac2f3bb8285372914d1a5ba84_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat
Size 5.8MB
Sample260817-yyjevsyekb
SHA256 c78d2c7096657829e607ebcf5b613d711df26667f23c29fcec4a61bbf631ae3e
MD5 0597b38ac2f3bb8285372914d1a5ba84
SHA1 b26788fe633fcf354a15df2aa9b7b823bbc52c22
SHA512 24e83944b368d14e643b3c7bf49e2912c3d85016999a2c4a4e526d17b03a0a4dd6db320af9d524dc9182f4466a28d392b6caf9775ea56f633844386a07bb06a4
SSDEEP 98304:YRZsnEjPjK3ALlY2hui84Gh86AbB+n2TcR5DYuIKoFLOAkGkzdnEVomFHKnPvb:YRZMEnKEpui8YTcR5DBoFLOyomFHKnPD
TLSH
T14456BE507E8A8476E5E30371596CF73D942FBE601B3591C712C07E1B99322C25E3EAAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects executables containing URLs to raw contents of a Github gist 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_RawGitHub_URL

File Explorer

2026-08-17_0597b38ac2f3bb8285372914d1a5ba84_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat

.exe 5.8MB

2026-08-17_0597b38ac2f3bb8285372914d1a5ba84_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat

IMPHASH 67d3774b4954a1020964779196be2a9f
SHA256 c78d2c7096657829e607ebcf5b613d711df26667f23c29fcec4a61bbf631ae3e
MD5 0597b38ac2f3bb8285372914d1a5ba84
SHA1 b26788fe633fcf354a15df2aa9b7b823bbc52c22
SHA512 24e83944b368d14e643b3c7bf49e2912c3d85016999a2c4a4e526d17b03a0a4dd6db320af9d524dc9182f4466a28d392b6caf9775ea56f633844386a07bb06a4
SSDEEP 98304:YRZsnEjPjK3ALlY2hui84Gh86AbB+n2TcR5DYuIKoFLOAkGkzdnEVomFHKnPvb:YRZMEnKEpui8YTcR5DBoFLOyomFHKnPD
TLSH
T14456BE507E8A8476E5E30371596CF73D942FBE601B3591C712C07E1B99322C25E3EAAB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Detects executables containing URLs to raw contents of a Github gist

Digest

26:a8:47:54:c0:60:f0:39:63:fe:49:9c:a0:87:d3:32:34:06:91:af:84:c6:10:3a:ed:2c:b1:53:0c:e0:c1:e7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=118757,CN=İNİTEX SOFTWARE DANIŞMANLIK LTD.ŞTİ.,O=İNİTEX SOFTWARE DANIŞMANLIK LTD.ŞTİ.,STREET=GÜZELOBA MAH. RAUF DENKTAŞ CAD. NO:56 İÇ KAPI NO:102,L=MURATPAŞA,ST=ANTALYA,C=TR,1.3.6.1.4.1.311.60.2.1.3=#13025452,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

May 19, 2023

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

57:a8:36:a1:7e:f4:a7:0f:7c:9f:36:06

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Oct 3, 2022 - Oct 3, 2024

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jan 12, 2016 - Jan 11, 2031

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Serial Number

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 23, 2017 - Mar 22, 2029

Minor OS version

Major OS version

Entry point

2820934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Dev\Projects\YogaDns\YogaDns\DnsManager\Release\YogaDns.pdb

kernel32

GetStdHandle GetTimeZoneInformation GetFileType SetStdHandle GetModuleHandleExW ExitProcess SetConsoleCtrlHandler GetConsoleMode GetConsoleCP InterlockedFlushSList InterlockedPushEntrySList RtlUnwind GetCPInfo LCMapStringW HeapQueryInformation RemoveDirectoryW GetFileInformationByHandle FindFirstFileExW GetSystemInfo QueryPerformanceFrequency GetExitCodeThread SwitchToThread TryEnterCriticalSection GetStringTypeW OutputDebugStringW VirtualAlloc VirtualQuery GetCommandLineA GetCommandLineW GetDateFormatW GetTimeFormatW IsValidLocale EnumSystemLocalesW SetFilePointerEx ReadConsoleW GetDriveTypeW IsValidCodePage GetACP GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CreateTimerQueue WriteConsoleW CreateThread ExitThread CreateDirectoryW SignalObjectAndWait GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait GetThreadTimes VirtualFree ReleaseSemaphore InterlockedPopEntrySList QueryDepthSList UnregisterWaitEx GetStartupInfoW IsDebuggerPresent GetSystemTimeAsFileTime QueryPerformanceCounter InitializeSListHead IsProcessorFeaturePresent TerminateProcess UnhandledExceptionFilter WaitForSingleObjectEx ResetEvent GetUserDefaultLCID SetErrorMode GetWindowsDirectoryW FindResourceExW SearchPathW GetProfileIntW GetTickCount FindNextFileW lstrcmpiW DuplicateHandle FreeLibraryAndExitThread WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFile GetVolumeInformationW GetFullPathNameW FlushFileBuffers FindFirstFileW FindClose DeleteFileW GetFileTime GetFileSizeEx GetFileAttributesExW FileTimeToLocalFileTime VirtualProtect GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW GlobalFlags GetThreadLocale LocalReAlloc GlobalHandle TlsFree InitializeCriticalSection ResumeThread SetThreadPriority SetEvent VerifyVersionInfoW VerSetConditionMask CompareStringA lstrcmpA GetVersionExW GlobalReAlloc GetFileSize GetCurrentDirectoryW GlobalGetAtomNameW lstrcpyW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime LocalAlloc CloseHandle WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW CompareStringW GlobalFindAtomW GlobalAddAtomW lstrcmpW GlobalDeleteAtom LoadLibraryA LoadLibraryExW GetModuleHandleA FreeResource FreeLibrary GetSystemDirectoryW EncodePointer OutputDebugStringA InitializeCriticalSectionAndSpinCount CopyFileW MulDiv GlobalSize TlsSetValue TlsGetValue TlsAlloc InitOnceExecuteOnce AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock SetLastError GetProcessHeap DeleteCriticalSection DecodePointer HeapAlloc RaiseException HeapReAlloc HeapSize InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection HeapFree GetTempFileNameW SystemTimeToFileTime GetSystemTime GetFileAttributesW CreateMutexW GetComputerNameExW GetQueuedCompletionStatus PostQueuedCompletionStatus CreateIoCompletionPort OpenMutexW GetCurrentThread CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks WideCharToMultiByte MultiByteToWideChar OpenProcess GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetTempPathW LoadLibraryW SetUnhandledExceptionFilter GetExitCodeProcess CreateProcessW FormatMessageA Sleep SetThreadpoolTimer CreateThreadpoolTimer LocalFree FormatMessageW GetTickCount64 WaitForSingleObject GetModuleHandleW GetProcAddress GetModuleFileNameW GlobalFree GlobalUnlock GlobalLock GlobalAlloc FindResourceW LoadResource LockResource SizeofResource CreateFileW GetOverlappedResult DeviceIoControl GetLastError CreateEventW MoveFileExW PeekNamedPipe

user32

GetWindowDC TabbedTextOutW GrayStringW DrawTextExW DrawTextW SetMenuItemInfoW DrawEdge DrawFocusRect DrawIconEx GetWindowRgn SubtractRect CreateMenu EnableWindow GetMenuCheckMarkDimensions SetMenuItemBitmaps CheckMenuItem IsDialogMessageW SetWindowTextW CheckDlgButton MoveWindow ShowWindow MonitorFromWindow WinHelpW GetScrollInfo SetScrollInfo CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetTopWindow GetClassLongW SetWindowLongW EqualRect MapWindowPoints AdjustWindowRectEx RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange EndDialog GetNextDlgTabItem GetActiveWindow SendDlgItemMessageA SetRectEmpty TrackMouseEvent IsZoomed CharUpperW GetAsyncKeyState KillTimer DeleteMenu SetWindowRgn SetCursor NotifyWinEvent GetSysColorBrush SetClassLongW BringWindowToTop LoadAcceleratorsW ScrollWindow ValidateRect EndPaint TranslateAcceleratorW GetForegroundWindow SetActiveWindow TrackPopupMenu SetMenu GetMenu GetCapture CreatePopupMenu DestroyMenu InsertMenuItemW LoadImageW UnpackDDElParam ReuseDDElParam GetKeyNameTextW MapVirtualKeyW GetMessageW GetClientRect CopyRect GetWindowRect SendMessageW GetDC PostMessageW GetSystemMetrics DrawFrameControl IsRectEmpty InvalidateRect CopyImage UpdateWindow ScreenToClient PtInRect HideCaret RedrawWindow LoadIconW GetSystemMenu AppendMenuW SystemParametersInfoW SetTimer GetIconInfo GetKeyState GetSysColor MessageBoxA GetCursorPos LoadMenuW GetSubMenu SetMenuDefaultItem SetForegroundWindow IsIconic GetMonitorInfoW MonitorFromPoint IntersectRect GetLastActivePopup GetParent wsprintfW MessageBoxW DefWindowProcW LoadCursorW FindWindowW UnregisterClassW DestroyIcon ClientToScreen MessageBeep EnableMenuItem GetFocus ReleaseDC FillRect InflateRect IsWindowVisible GetDesktopWindow SetCapture WindowFromPoint ReleaseCapture GetMenuStringW GetMenuState GetMenuItemID GetMenuItemCount InsertMenuW RemoveMenu SetFocus SetScrollPos GetScrollPos GetWindowTextW GetWindowTextLengthW GetWindowLongW GetWindow IsWindowEnabled GetWindowThreadProcessId DrawStateW GetClassNameW LoadBitmapW RegisterWindowMessageW DispatchMessageW PeekMessageW GetMessagePos MapVirtualKeyExW CreateDialogIndirectParamW UpdateLayeredWindow EnableScrollBar UnionRect GetMenuItemInfoW GetComboBoxInfo OpenClipboard CloseClipboard SetClipboardData BeginPaint GetMessageTime SetLayeredWindowAttributes EnumDisplayMonitors SetWindowContextHelpId MapDialogRect TranslateMessage ShowOwnedPopups SetRect RealChildWindowFromPoint GetMenuDefaultItem RegisterClipboardFormatW CharUpperBuffW LockWindowUpdate ModifyMenuW ToUnicodeEx GetKeyboardLayout GetKeyboardState CreateAcceleratorTableW DestroyAcceleratorTable CopyAcceleratorTableW SetCursorPos CopyIcon FrameRect IsClipboardFormatAvailable PostThreadMessageW WaitMessage GetDoubleClickTime EnumChildWindows CharNextW InvalidateRgn GetNextDlgGroupItem GetUpdateRect InvertRect DrawIcon DestroyCursor DrawMenuBar DefFrameProcW DefMDIChildProcW TranslateMDISysAccel IsCharLowerW PostQuitMessage CallWindowProcW RegisterClassW GetClassInfoW GetClassInfoExW CreateWindowExW IsWindow IsMenu IsChild DestroyWindow SetWindowPos GetWindowPlacement SetWindowPlacement BeginDeferWindowPos EmptyClipboard OffsetRect SetParent DeferWindowPos EndDeferWindowPos GetDlgItem GetDlgCtrlID

gdi32

MoveToEx TextOutW ExtTextOutW SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx OffsetViewportOrgEx OffsetWindowOrgEx ScaleViewportExtEx ScaleWindowExtEx CreateRoundRectRgn CreateRectRgnIndirect PatBlt CreateDIBSection CombineRgn GetDIBits RealizePalette SetPixel StretchBlt SetDIBColorTable Ellipse GetBkColor CreatePolygonRgn Polygon Polyline CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo SetTextAlign Rectangle GetMapMode SetRectRgn DPtoLP GetRgnBox OffsetRgn CreatePalette GetPaletteEntries EnumFontFamiliesExW GetNearestPaletteIndex GetSystemPaletteEntries LPtoDP ExtFloodFill SetPaletteEntries FrameRgn GetBoundsRect PtInRegion GetViewportOrgEx GetWindowOrgEx SetPixelV GetTextFaceW SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetBkMode SelectPalette ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible GetStockObject GetObjectW CreateFontIndirectW GetTextExtentPoint32W GetDeviceCaps CreateFontW SelectObject GetTextMetricsW GetTextColor CreateCompatibleDC CreateCompatibleBitmap DeleteDC CopyMetaFileW CreateDCW CreateSolidBrush DeleteObject SetBkColor SetTextColor CreateBitmap BitBlt CreateHatchBrush CreatePen CreatePatternBrush CreateRectRgn Escape ExcludeClipRect GetClipBox FillRgn GetObjectType GetPixel GetViewportExtEx GetWindowExtEx IntersectClipRect LineTo RoundRect CreateEllipticRgn PtVisible

msimg32

TransparentBlt AlphaBlend

winspool.drv

ClosePrinter DocumentPropertiesW OpenPrinterW

advapi32

RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegDeleteValueW RegCreateKeyExW GetLengthSid CopySid OpenThreadToken OpenProcessToken GetTokenInformation LookupAccountSidW CryptAcquireContextW CryptCreateHash CryptReleaseContext CryptHashData CryptDestroyHash RegEnumValueW RegEnumKeyExW RegQueryValueW RegEnumKeyW RegCloseKey SystemFunction036 StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerExW SetServiceStatus CryptGetHashParam

shell32

SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteA ShellExecuteExW SHGetKnownFolderPath Shell_NotifyIconW DragQueryFileW DragFinish SHGetFileInfoW SHAppBarMessage SHGetMalloc SHGetSpecialFolderLocation SHGetDesktopFolder ShellExecuteW

comctl32

ord381 ImageList_GetIconSize ImageList_Draw ImageList_AddMasked ImageList_BeginDrag ImageList_DragEnter ImageList_DragMove ImageList_DragShowNolock ImageList_DragLeave ImageList_EndDrag

shlwapi

UrlUnescapeW StrStrW PathFindExtensionW PathFindFileNameW PathRemoveFileSpecW PathIsUNCW PathStripToRootW StrFormatKBSizeW

uxtheme

IsAppThemed OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName DrawThemeParentBackground GetWindowTheme GetThemeSysColor DrawThemeText IsThemeBackgroundPartiallyTransparent GetThemePartSize

ole32

CoRegisterMessageFilter CoRevokeClassObject OleUninitialize OleInitialize CoFreeUnusedLibraries IsAccelerator OleTranslateAccelerator OleDestroyMenuDescriptor OleCreateMenuDescriptor OleLockRunning RevokeDragDrop RegisterDragDrop CoLockObjectExternal OleGetClipboard CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject DoDragDrop OleIsCurrentClipboard CoDisconnectObject CLSIDFromProgID CLSIDFromString CoInitializeEx CoCreateGuid CoCreateInstance ReleaseStgMedium OleDuplicateData CoTaskMemAlloc IIDFromString CoUninitialize CoTaskMemFree CoInitialize CreateStreamOnHGlobal OleFlushClipboard

oleaut32

OleCreateFontIndirect VarBstrFromDate VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime LoadTypeLi SysStringLen VariantChangeType VariantClear VariantInit SysAllocStringLen SysFreeString SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipGetImagePixelFormat GdipBitmapUnlockBits GdipGetImageGraphicsContext GdipDrawImageI GdipGetImagePaletteSize GdipGetImagePalette GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream GdipFree GdipAlloc GdipCloneImage GdipDisposeImage GdipCreateHBITMAPFromBitmap GdipCreateFromHDC GdipBitmapLockBits GdipCreateBitmapFromScan0 GdipCreateBitmapFromHBITMAP GdipDrawImageRectI GdipGetImageHeight GdipDeleteGraphics GdipSetInterpolationMode GdipGetImageWidth

iphlpapi

CancelMibChangeNotify2 NotifyIpInterfaceChange GetAdaptersAddresses

rasapi32

RasEnumEntriesW RasGetEntryPropertiesW

dnsapi

DnsFree DnsQuery_A DnsQueryConfig

wlanapi

WlanGetAvailableNetworkList WlanOpenHandle WlanFreeMemory WlanCloseHandle WlanScan WlanEnumInterfaces

ws2_32

htonl getservbyname getprotobyname sendto ntohl ntohs socket setsockopt connect send recvfrom getservbyport getprotobynumber WSAGetLastError WSAStartup recv closesocket getsockname inet_ntop getaddrinfo freeaddrinfo inet_pton getnameinfo ioctlsocket WSAIoctl WSARecv WSASetLastError select bind getsockopt shutdown htons WSASend

crypt32

CertGetCertificateChain CertFreeCertificateChain CertVerifyCertificateChainPolicy CertFreeCertificateContext CertCreateCertificateContext CertCloseStore CertOpenStore CertAddCertificateContextToStore CertGetCertificateContextProperty

secur32

ApplyControlToken EncryptMessage QueryContextAttributesW DecryptMessage FreeContextBuffer InitializeSecurityContextW AcquireCredentialsHandleW FreeCredentialsHandle DeleteSecurityContext

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

wininet

HttpQueryInfoW InternetSetStatusCallbackW InternetGetLastResponseInfoW InternetQueryOptionW InternetQueryDataAvailable InternetWriteFile InternetSetFilePointer InternetReadFile InternetOpenUrlW InternetCloseHandle InternetOpenW InternetCanonicalizeUrlW InternetCrackUrlW

winmm

PlaySoundW

imm32

ImmGetOpenStatus ImmGetContext ImmReleaseContext

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-17_0597b38ac2f3bb8285372914d1a5ba84_amadey_darkgate_elex_glassworm_luca-stealer_lynx_magniber_medusalocker_njrat

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

iphlpapi

rasapi32

dnsapi

wlanapi

ws2_32

crypt32

secur32

oleacc

wininet

winmm

imm32

generic